Shadow IT Assessment Workshop (Remote) is a 2-day remote training engagement for organizations that want to discover and assess cloud applications and services being used without the IT department’s knowledge. IT Partner uses Microsoft Defender for Cloud Apps to evaluate cloud app usage from the organization’s network and provides findings, recommendations, and a prioritized Cloud Usage Visibility and Control Road Map.
Shadow IT refers to applications and infrastructure that are managed and used without the enterprise IT department’s knowledge. This remote workshop helps customers discover Shadow IT by using Microsoft Defender for Cloud Apps — managed in the unified Microsoft Defender portal — to evaluate cloud application and service usage from within the organization’s network. The engagement focuses on understanding the customer’s cloud security objectives, comparing them with actual cloud usage, and producing findings and recommendations for improving visibility and control. This service is listed for Office 365 and Microsoft 365 as Training.
The Shadow IT Assessment typically consists of an up to two-hour remote kickoff meeting followed by remote assessment workshops. The kickoff includes an introduction to the engagement covering objectives, flow, responsibilities, and governance, and IT Partner provides and explains the pre-assessment questionnaire to the customer.
Review the questionnaire, which should be ready by the time of the webinar, to get mutual understanding, especially around the customer’s cloud usage and associated security objectives and requirements. Provide education and readiness on Microsoft Defender for Cloud Apps.
Review the Defender for Cloud Apps report(s) with the customer, explore specific use cases of cloud usage in the portal, create the final report from the engagement highlighting discovered cases of Shadow IT, and create the Cloud Usage Visibility and Control Road Map.
Present and discuss the final report from the engagement, highlighting discovered cases of Shadow IT, meaning usage of unapproved cloud applications or services. Review the Cloud Usage Visibility and Control Road Map.
The Shadow IT Assessment Workshop (Remote) is a 2-day remote training engagement that helps organizations discover and assess cloud applications and services being used without the IT department’s knowledge. IT Partner uses Microsoft Defender for Cloud Apps to evaluate cloud app usage from the organization’s network and provides findings, recommendations, and a prioritized Cloud Usage Visibility and Control Road Map.
This workshop is intended for organizations using Office 365 or Microsoft 365 that want better visibility and control over unapproved or unknown cloud application usage. It is especially relevant when IT leaders need to compare cloud security objectives with actual cloud usage discovered from network activity.
The Shadow IT Assessment Workshop is a 2-day remote engagement. The stated plan includes a remote kickoff meeting and remote assessment webinars covering education, setup, exploration, discovery, final report review, and the road map.
The workshop includes a kickoff presentation, a pre-assessment questionnaire, a Shadow IT Discovery Report, and a Cloud Usage Visibility and Control Road Map. The discovery report lists possible Shadow IT usage and recommendations for further investigation, while the road map prioritizes actions for improving cloud usage visibility and control.
The remote kickoff meeting typically lasts up to two hours and introduces the engagement objectives, flow, responsibilities, and governance. IT Partner also provides and explains the pre-assessment questionnaire so the customer can supply information about cloud adoption, security requirements, regulations, and frameworks.
The customer needs a Microsoft 365 tenant with microsoft Defender for Cloud Apps licensing for in-scope users — included in Microsoft 365 E5 and in the Microsoft 365 E5 Security add-on, or available standalone; a Microsoft trial can be used for evaluation. The customer also needs access to firewall or proxy logs and should have the Log Collector configured and ready to work.
Yes, Microsoft Defender for Cloud Apps is a prerequisite because the assessment uses it to evaluate cloud application and service usage from the organization's network. Microsoft Defender for Cloud Apps licensing for in-scope users — included in Microsoft 365 E5 and in the Microsoft 365 E5 Security add-on, or available standalone; a Microsoft trial can be used for evaluation.
The assessment requires access to logs from customer firewalls or proxies because those logs support discovery of cloud application and service usage. The customer should also have the Log Collector configured and ready, and knowledgeable firewall personnel may need to provide credentials for log extraction or adjust firewall rules if necessary.
No planned downtime is required — the workshop is a remote assessment based on Microsoft Defender for Cloud Apps, questionnaires, and firewall or proxy log analysis. Any operational impact from log collection, firewall access, or configuration changes is agreed with your network team before the engagement.
No. The workshop covers discovery, assessment, reporting, recommendations, and a prioritized road map. Blocking, removing, or remediating Shadow IT applications is not part of the 2-day workshop — enforcement actions and application controls are scoped separately with IT Partner.
After completion, the customer receives the final report and the Cloud Usage Visibility and Control Road Map for prioritizing next steps. Implementing the road map's actions is not included in the 2-day workshop; IT Partner can quote follow-on implementation work separately.
Yes — an on-site version of the Shadow IT Assessment Workshop (4 consulting days, 3 days on-site) is available as a separate service; this page describes the remote version.